PT-2025-34709 · Tp Link · Tp-Link Kp303 (Us) Smartplug

Elysee Franchuk · Publicado 2025-08-25 · Atualizado 2025-09-30 · CVE-2025-8627

Positive Technologies (AI Summary)

CVSS v3.1

8.8

Alta

Vetor base

AV:A/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H

Name of the Vulnerable Software and Affected Versions: TP-Link KP303 Smartplug versions prior to 1.1.0

Description: The TP-Link KP303 Smartplug is susceptible to unauthenticated protocol commands that can lead to an unintended power-off condition and potential information leak.

Recommendations: Update the TP-Link KP303 Smartplug to version 1.1.0 or later.

Correção

Missing Authentication

Enumeração de Fraquezas

CWE-306

Identificadores relacionados

BDU:2025-10692

CVE-2025-8627

Produtos afetados

Tp-Link Kp303 (Us) Smartplug

Referências · 14

• https://t.me/CVEtracker/30872 · Publicação no Telegram
• https://tp-link.com/us/support/faq/4619 · Aviso do Fabricante
• https://twitter.com/fridaysecurity/status/1960163860519768514 · Publicação no Twitter
• https://t.me/pentestingnews/66916 · Publicação no Telegram
• https://twitter.com/VulmonFeeds/status/1960273932222648611 · Publicação no Twitter
• https://twitter.com/the_yellow_fall/status/1960163404166959338 · Publicação no Twitter
• https://t.me/cveNotify/133367 · Publicação no Telegram
• https://vuldb.com/?id.321390 · Nota
• https://t.me/cveNotify/133438 · Publicação no Telegram
• https://twitter.com/Komodosec/status/1973149490019443135 · Publicação no Twitter
• https://bdu.fstec.ru/vul/2025-10692 · Nota de Segurança
• https://nvd.nist.gov/vuln/detail/CVE-2025-8627 · Nota de Segurança
• https://twitter.com/CVEnew/status/1960092563655852063 · Publicação no Twitter
• https://osv.dev/vulnerability/CVE-2025-8627 · Aviso do Fabricante